Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/lQBZQ5TX3dDabim2mV8l7KANYXs.roa
File: lQBZQ5TX3dDabim2mV8l7KANYXs.roa (raw, json)
Hash identifier: f4+GnTseAZN7LM49odk8zI4uIELYYvUXy5i9drS11Kw=
Subject key identifier: 95:00:59:43:94:D7:DD:D0:DA:6E:29:B6:99:5F:25:EC:A0:0D:61:7B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0442E06E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/lQBZQ5TX3dDabim2mV8l7KANYXs.roa
Signing time: Wed 04 May 2022 11:52:10 +0000
ROA not before: Wed 04 May 2022 11:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71491694 (0x442e06e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 4 11:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9500594394d7ddd0da6e29b6995f25eca00d617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:c9:1e:2a:a7:e0:ca:6d:e4:95:5d:2d:15:
5f:0a:80:6b:5d:29:b0:3f:f9:59:4d:d6:01:e0:e6:
52:02:c9:6c:55:e2:8d:cd:b9:3b:8f:df:c4:cd:b6:
dc:ac:80:b9:29:ab:4e:15:26:c9:b2:ee:fe:bb:e2:
ad:c0:2e:0a:1d:5c:80:bb:f4:f8:34:71:ad:d2:f2:
8a:44:77:8f:39:48:42:19:6d:e9:95:7f:9b:c9:b1:
64:f9:5c:dc:3d:50:92:6a:38:6b:14:ce:8d:d1:7b:
fa:cc:21:8f:c9:65:57:32:bd:5d:21:a7:16:c0:21:
11:75:19:cf:df:03:19:c3:a2:f3:2f:60:67:7a:b7:
ea:04:c9:1e:45:cf:a0:6d:96:ee:94:41:e0:e0:c9:
d7:7c:30:e6:15:32:91:61:df:b4:5c:eb:fd:48:f7:
75:4e:bf:04:73:33:f5:da:3e:42:39:45:28:ca:62:
48:15:7c:4d:7c:17:fb:38:83:40:d1:92:22:cc:8c:
06:13:85:c8:2b:15:4a:bb:22:4b:4e:a6:cc:09:ce:
69:eb:96:96:4e:73:d9:31:6c:84:0a:52:f8:87:ac:
14:b0:72:43:48:68:d8:73:33:04:ac:90:37:89:f9:
35:1f:b5:78:dc:e2:d8:ce:eb:4d:b0:de:14:4b:d7:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:59:43:94:D7:DD:D0:DA:6E:29:B6:99:5F:25:EC:A0:0D:61:7B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/lQBZQ5TX3dDabim2mV8l7KANYXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:bf:c9:d8:06:27:83:c3:a0:f0:a7:3f:d6:9e:dc:64:cd:23:
43:29:51:67:c4:34:55:48:98:17:9c:77:ac:47:e7:e5:52:dc:
75:96:08:69:3c:7e:42:f5:01:b3:e6:bb:d9:de:66:d9:68:13:
5d:0d:aa:17:5b:ca:12:88:e2:7e:95:7a:94:b5:0d:c1:7f:9c:
23:ae:36:78:70:e1:39:d5:16:ae:aa:10:fe:10:d3:5b:5a:aa:
aa:6c:33:2c:1f:3b:7f:f7:03:86:77:70:67:5d:3e:fe:ea:18:
6a:f8:c3:21:cf:5e:80:57:75:c4:23:c0:a8:1d:c1:75:f3:b7:
7c:62:20:0f:ca:13:08:09:aa:39:e6:54:bb:fc:f8:5b:de:99:
90:c9:85:02:fc:66:b2:a0:d9:9c:e3:ea:db:36:58:ef:8a:50:
67:3b:11:dd:19:c9:f7:32:29:e8:fb:26:5e:b3:54:27:05:da:
19:cc:0d:77:b7:1a:1e:4f:99:f6:84:cb:8c:21:29:85:48:dc:
07:7f:56:21:0d:d8:2d:e7:cc:12:6f:a3:d1:e3:6e:97:a3:66:
a6:f7:c3:2b:13:79:70:25:72:f9:c9:23:a4:0f:46:d9:3a:29:
c4:73:12:64:73:fa:67:08:d6:8e:04:70:f9:49:ac:7b:e8:65:
c5:30:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org